Hi,

I've been using this module in D7 extensively (especially for View Own Permission) but it broke the security a few years ago in D7 as stated on the front page

There are open security issues: Private files downloadable when node access is denied, Users without 'Grant content access' permission can edit content access.

Surprisingly this module with a large user base but being left unmaintained with no further update since then and therefore I wrote to suggest Access Control with View Own Content / View Own Entity in Core

I doubt if Fago has left the Drupal community as many of his great and well-known modules are stuck in further development since 2017 namely Rules module too.

Thanks

Comments

paulwdru created an issue. See original summary.

gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
commented
Assigned: Unassigned » gisle
Category: Support request » Task
Priority: Critical » Normal
Status: Active » Fixed

I signed on a new maintainer recently and renovating the project.

Patches will be now be reviewed in a timely manner. Credit will be given both for creating (useful) patches and for reviews of them.

websiteworkspace’s picture

websiteworkspace commented

What is the plan for creating a new "release" version of those module and not just "dev" builds?

gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
commented

What is the plan (date) for creating a new "release" version of those module and not just "dev" builds?

Currently no plan. This is unpaid work, so it is impossible for me to commit to a schedule. I do it in my spare time.

If somebody is willing to sponsor the renovation of this project, I shall be able to commit to a firm time of delivery.
Cost would be US $1500 (paid in advance via PayPal or bank transfer), and promised time of delivery would be one week after payment is received. The release will be a full release (not just alpha or beta), and it will have security coverage.

Main blocker is security issues in both branches, but the integration with ACL is currently broken and need fixing as well before I can make a release.

Also: Please do not ask the same question multiple places. It serves no purpose.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.